--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-16T14:01:31Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-04-16T14:01:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-16T14:01:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-04-16T14:01:31Z" name: system:openshift:openshift-monitoring-nm4hs resourceVersion: "8116" uid: a8a549f0-5318-4975-aa98-177daab33aa4 spec: extra: authentication.kubernetes.io/credential-id: - JTI=1fba70d9-2471-478a-bac2-71f6347a5b5e authentication.kubernetes.io/node-name: - ip-10-0-142-16.ec2.internal authentication.kubernetes.io/node-uid: - ab89ad2e-d2a6-4606-b2fa-d0b8c1498949 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6667474d89-ht2bj authentication.kubernetes.io/pod-uid: - a78f3464-a81c-413a-a11a-ba6020b56874 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 188ccb2b-3dc1-4b97-aac8-b167f035d63c usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-04-16T14:01:31Z" lastUpdateTime: "2026-04-16T14:01:31Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-nm4hs" reason: AutoApproved status: "True" type: Approved